Amendments to the Claims 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 



1 1 . (Currently Amended) A method for secure key delivery for decrypting a 

2 distribution archive file containing a plurality of digital content documents at an 

3 uns e cur e unsecured site that receives a stream of distribution archive files from a 

4 publishing site, the method comprising: 

5 (a) at the publishing site, encrypting each digital content document with a key 

6 to generate encrypted document content: 

7 £b) at the publishing site, computing for each document a document identifier 

8 that is related to, but cannot be derived solely from, the encrypted content 

9 of that document; 

10 (c) at the publishing site, creating a list of document identifier and decryption 

11 key pairs: 

12 (d) at the publishing site, assembling the encrypted document content for 

13 each content document and the key pair list into a distribution archive file: 

14 (e) at the publishing site, encrypting the distribution archive file with a 

15 scheduled key unique to that distribution archive file and placing the 

16 encrypted distribution file on the stream : 

17 (f) at the unsecured site, selecting a distribution archive file from the stream: 

18 (ag) at the unsecured site, extracting a scheduled key from a f i rst the selected 

19 distribution archive file in the stream; 

20 (bh) at the unsecured site, using the r e tr ie v e d extracted scheduled key to 

21 decrypt the next subsequent distribution archive file in the stream following 

22 the fifst selected distribution archive file; 
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23 £i) removing the encrypted document content and the key pair list from the 

24 decrypted distribution archive file and storing them at the unsecured site; 

25 and 

26 (cj) selecting the distribution archive file decrypted in step (h) and repeating 

27 steps (ag) , (h), (i) and (tej) for each distribution archive file in the stream. 

1 2. (Currently Amended) The method of claim 1 further comprising: 

2 (dj<) receiving a scheduled key fof at the unsecured site to decrypt the first 

3 distribution archive file in the stream from the publishing site. 

1 3. (Currently Amended) The method of claim 1 wherein e ach d i str i but i on arch i v e f ile 

2 compr i s e s a p l ura li ty of e ncrypt e d content f ile s and wh e r ei n th e m e thod furth e r 

3 step (e) comprisesv 

4 (d) encrypting, with a scheduled key, a distribution archive file including a 

5 scheduled key for the next distribution archive file in the stream and the 

6 plurality of encrypted content files. 

1 4. (Currently Amended) The method of claim 1 wherein e ach d i str i but i on arch i v e f ile 

2 compr i s e s a p l ura li ty of e ncrypt e d cont e nt f ile s and wh e r ei n th e m e thod furth e r 

3 step (e) comprises^ 

4 (d) encrypting, with a scheduled key, a distribution archive file including the 

5 plurality of encrypted content files and a non-encrypted scheduled key for 

6 the next distribution archive file. 

5. (Canceled). 

1 6. (Currently Amended) The method of claim § 1 wherein step (ge) comprises 

2 generating a new scheduled key, encrypting the new scheduled key and 

3 including the encrypted scheduled key in the distribution archive file. 
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1 7. (Currently Amended) The method of claim & 1. wherein th e n e w sch e du le d k e y i s 

2 e ncrypt e d step (b) comprises for each document, computing the document 

3 identifier using a text string embedded in program code in the publishing site. 

1 8. (Currently Amended) The method of claim 7 1 wherein step (ag) comprises 

2 storing an extracted scheduled key in encrypted form. 

1 9. (Currently Amended) The method of claim § 7 wh e r ei n th e e xtract e d sch e du le d 

2 k e y i s e ncrypt e d further comprising recomputing a document identifier at the 

3 unsecured site with a text string embedded in program code located at the 

4 uns e cur e unsecured site. 

1 1 0. (Currently Amended) The method of claim 9 wherein the text string embedded in 

2 program code in the publishing site is the same as the text string embedded in 

3 program code at the unsocuro unsecured site. 

1 11. (Currently Amended) Apparatus A n apparatus for secure key delivery for 

2 decrypting a distribution archive file containing a plurality of digital content 

3 documents at an uns e cur e unsecured site that receives a stream of distribution 

4 archive files from a publishing site, the apparatus comprising: 

5 at the publishing site, an encryption engine that encrypts each digital 

6 content document with a key to generate encrypted document content; 

7 at the publishing site, an QID calculator that computes for each document 

8 a document identifier that is related to, but cannot be derived solely from, the 

9 encrypted content of that document; 

10 at the publishing site, means for creating a list of document identifier and 

11 decryption key pairs; 

12 at the publishing site, means for assembling the encrypted document 

13 content for each content document and the key pair list into a distribution archive; 
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14 at the publishing site, means for encrypting the distribution archive file with 

15 a scheduled key unique to that distribution archive file; 

16 at the unsecured site, a key decryptor that extracts a scheduled key from 

17 each distribution archive file in the stream; 

18 means for temporarily storing the extracted scheduled key at the 

19 unsecured site :-an4 

20 at the unsecured site, a decryption engine that uses the stored scheduled 

21 key to decrypt the next distribution archive file in the stream following the 

22 distribution archive file from which the scheduled key was extracted ; and 

23 a file system that removes the encrypted document content and the key 

24 pair list from the decrypted archive file and stores them at the unsecured site . 

1 12. (Original) The apparatus of claim 1 1 further comprising means for receiving a 

2 scheduled key for the first distribution archive file in the stream from the 

3 publishing site. 

1 1 3. (Currently Amended) The apparatus of claim 1 1 wherein ea ch d i str i but i on arch i v e 

2 f ile compr i s e s a p l ura li ty of e ncrypt e d cont e nt f il es and wh e r ei n the apparatus 

3 further comprises an encryption engine that encrypts, with a scheduled key, a 

4 distribution archive file including a scheduled key for the next distribution archive 

5 file in the stream and the plurality of encrypted content files. 

1 14. (Currently Amended) The apparatus of claim 1 1 wherein e ach d i str i but i on arch i v e 

2 f ile compr i s e s a p l ura li ty of e ncrypt e d cont e nt f ile s and wh e r ei n the apparatus 

3 further comprises an encryption engine that encrypts, with a scheduled key, a 

4 distribution archive file including the plurality of encrypted content files and a non- 

5 encrypted scheduled key for the next distribution archive file. 

15. (Canceled). 
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1 16. (Currently Amended) The apparatus of claim 4-5 1 1 wherein the means for 

2 encrypting the distribution archive with a scheduled key comprises a key 

3 generator that generates a new scheduled key, a key encryptor that encrypts the 

4 new scheduled key and means for including the encrypted scheduled key in the 

5 distribution archive. 

1 17. (Currently Amended) The apparatus of claim 4& 1 1 wherein the k e y e ncryptor 

2 OID calculator encrypts the new scheduled key using a text string embedded in 

3 program code in the publishing site. 

1 18. (Currently Amended) The apparatus of claim 47- 1 1 wherein the means for 

2 temporarily storing the extracted scheduled key comprises means for storing an 

3 extracted scheduled key in encrypted form. 

1 1 9. (Currently Amended) The apparatus of claim 4-8 wh e r ei n th e m e ans for 

2 t e mporar il y stor i ng th e e xtract e d sch e du le d k e y compr i s e s 17 further comprising 

3 means for e ncrypt i ng th e e xtract e d sch e du le d k e y recomputing a document 

4 identifier with a text string embedded in program code located at the uns e cur e 

5 unsecured site. 

1 20. (Currently Amended) The apparatus of claim 1 9 wherein the text string 

2 embedded in program code in the publishing site is the same as the text string 

3 embedded in program code at the unsecur e unsecured site. 

1 21 . (Currently Amended) A computer program product for secure key delivery for 

2 decrypting a distribution archive file containing a plurality of digital content files at 

3 an uns e cur e unsecured site that receives a stream of distribution archive files 

4 from a publishing site, the computer program product comprising a computer 

5 usable medium having computer readable program code thereon, including: 
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6 program code at the publishing site, for encrypting each digital content 

7 document with a key to generate encrypted document content; 

8 program code at the publishing site, for computing for each document a 

9 document identifier that is related to, but cannot be derived solely from, the 

10 encrypted content of that document; 

11 program code at the publishing site, for creating a list of document 

12 identifier and decryption key pairs; 

13 program code at the publishing site, for assembling the encrypted 

14 document content for each content document and the key pair list into a 

15 distribution archive file; and 

16 program code at the publishing site, for encrypting the distribution archive 

17 file with a scheduled key unique to that distribution archive file and for placing the 

18 encrypted distribution file on the stream; 

19 program code at the unsecured site for extracting a scheduled key from 

20 each distribution archive file in the stream; 

21 program code at the unsecured site for temporarily storing the extracted 

22 scheduled key;-aft4 

23 program code at the unsecured site for using the stored scheduled key to 

24 decrypt the next distribution archive file in the stream following the distribution 

25 archive file from which the scheduled key was extracted ; and 

26 program code for removing the encrypted document content and the key 

27 pair list from the decrypted archive file and for storing them at the unsecured site . 

1 22. (Original) The computer program product of claim 21 further comprising program 

2 code for receiving a scheduled key for the first distribution archive file in the 

3 stream from the publishing site. 

1 23. (Currently Amended) The computer program product of claim 21 wherein eaeb 

2 d i str i but i on arch i v e f ile compr i s e s a p l ura li ty of e ncrypt e d cont e nt f ile s and 

3 wh e r ei n the computer program product further comprises: 
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4 program code for encrypting, with a scheduled key, a distribution archive 

5 file including a scheduled key for the next distribution archive file in the stream 

6 and the plurality of encrypted content files. 

1 24. (Currently Amended) The computer program product of claim 21 wherein each 

2 d i str i but i on arch i v e f ile compr i s e s a p l urality of e ncrypt e d cont e nt f ile s and 

3 wh e r ei n the computer program product further comprises: 

4 program code for encrypting, with a scheduled key, a distribution archive 

5 file including the plurality of encrypted content files and a non-encrypted 

6 scheduled key for the next distribution archive file. 

25. (Canceled). 

1 26. (Currently Amended) The computer program product of claim 2§ 21 wherein the 

2 program code for encrypting the distribution archive file comprises program code 

3 for generating a new scheduled key, program code for encrypting the new 

4 scheduled key and program code for including the encrypted scheduled key in 

5 the distribution archive file. 

1 27. (Currently Amended) The computer program product of claim 2-§ 21 wherein the 

2 program code for e ncrypt i ng th e n e w sch e du le d k e y e ncrypts th e n e w sch e du le d 

3 key -computing a document identifier computes the document identifier using a 

4 text string embedded in program code in the publishing site. 

1 28. (Currently Amended) The computer program product of claim 27 21 wherein the 

2 program code for temporarily storing the extracted scheduled key comprises 

3 program code for storing an extracted scheduled key in encrypted form. 

1 29. (Currently Amended) The computer program product of claim 28 wh e r ei n th e 

2 further comprising program code for e ncrypt i ng th e e xtract e d sch e du le d k e y 
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3 e ncrypts th e e xtract e d sch e du le d k e y recomputing a document identifier with a 

4 text string embedded in program code located at the uns e cur e unsecured site. 

1 30. (Currently Amended) The computer program product of claim 29 wherein the text 

2 string embedded in program code in the publishing site is the same as the text 

3 string embedded in program code at the uns e cur e unsecured site. 
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